Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: iDE0RRYiCxmEmtCJGnVkBK8HsK60ZlVh0iFdv+tvWl8=
Subject key identifier: F3:AE:96:BE:2C:C4:42:0A:40:9E:57:08:40:87:CE:A1:3A:1A:6C:DC
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 019F1377AEDB48C0EAC84B52D248482C471B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 1525
Signing time: Mon 29 Jun 2026 13:00:38 +0000
Manifest this update: Mon 29 Jun 2026 13:00:38 +0000
Manifest next update: Tue 30 Jun 2026 13:00:38 +0000
Files and hashes: 1: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (hash: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM=)
2: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: 5hfhHFR1BUqrq/vAUiCTztDenm8v4ZPARaLd2s8PuN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:77:ae:db:48:c0:ea:c8:4b:52:d2:48:48:2c:47:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Jun 29 13:00:38 2026 GMT
Not After : Jun 30 13:00:38 2026 GMT
Subject: CN=f3ae96be2cc4420a409e57084087cea13a1a6cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:38:6f:4b:bd:07:59:79:4b:2e:7f:82:e1:
d4:44:5a:0a:14:79:b8:1a:6c:47:a0:45:e0:88:3e:
39:ce:6f:36:64:10:b7:3b:d2:46:ce:b3:9c:90:8a:
3f:cb:09:53:66:9e:38:20:53:51:b0:37:8f:e8:0d:
72:5d:7c:1a:85:a8:89:5a:3f:29:22:c6:47:d5:2e:
ab:e6:f3:8b:09:88:b4:25:9f:c3:de:b9:15:02:1c:
db:8a:2e:a4:fe:6b:7c:9f:8f:c0:e8:d3:c7:3d:9f:
d7:ab:d9:b7:26:3c:69:b2:40:5c:7e:ad:9d:50:ad:
2f:5a:18:d4:dc:56:87:ec:21:cb:63:57:21:15:bb:
63:e6:0f:a8:1f:c5:2c:36:f7:2e:d1:9c:57:94:73:
40:ff:fb:f3:44:f4:4c:6e:e4:2c:94:0c:3a:ea:75:
33:1a:fc:9b:f0:e4:e4:cc:d7:1c:03:0c:3c:30:a9:
f1:c7:33:a8:1e:5b:c3:06:76:af:de:f1:39:d6:df:
b9:4f:0e:0c:a0:bf:d1:e5:cc:a8:44:1a:4c:79:f9:
32:c0:8b:f5:c9:4a:0c:d9:df:9c:41:0e:4b:98:d0:
f6:e1:ab:dd:6e:12:bd:03:a3:cc:4f:69:60:02:b4:
9e:9a:8f:a8:31:29:e6:b7:f8:0b:a3:dc:88:e9:b2:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AE:96:BE:2C:C4:42:0A:40:9E:57:08:40:87:CE:A1:3A:1A:6C:DC
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9c:f0:b1:31:04:0c:a6:0a:a6:28:a1:5f:05:0e:72:0a:a1:
5e:e6:6e:71:4c:34:b0:5a:e4:73:42:cd:93:e8:70:67:a4:99:
f5:44:f4:e5:dd:3e:e8:af:08:ef:16:45:7b:18:fd:ce:05:16:
27:8b:bc:88:6b:ca:0c:c9:90:56:91:ca:f6:48:4a:58:ce:ba:
78:ec:f8:b9:79:a3:94:5e:49:61:b7:64:bb:48:ad:b6:bd:1c:
c6:83:0b:4f:83:32:f9:2e:61:f2:83:3e:66:47:36:24:ce:99:
1b:09:3e:cb:e2:72:97:9c:ae:d4:ad:c5:02:c2:b7:f6:67:83:
3d:b9:39:52:73:fb:b8:56:1f:af:a6:8e:72:ae:1c:ba:ba:61:
70:06:dd:97:43:30:09:15:3b:f4:d5:c3:4b:69:df:2c:a2:27:
7d:a3:a7:31:b8:05:e7:5d:9b:2c:e3:4e:a6:e6:5e:97:a9:52:
92:1f:87:87:bd:25:e3:f4:c0:d4:47:ba:d7:b3:ad:c9:b6:2e:
db:76:51:a6:a7:9f:0f:37:84:be:26:cf:05:55:db:60:04:06:
ab:fe:e2:9b:6f:66:0b:96:87:06:6b:84:45:90:35:16:64:48:
22:da:9d:82:ec:29:44:71:ee:fe:12:5d:27:09:ea:10:1b:e5:
63:3d:9f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Td67bSMDqyEtS0khILEcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNGE4ZjA0ZWYyZmViZTU0ZjlkYjZhOWEyZjg1NjU5NGI2
ZTJmMDgwHhcNMjYwNjI5MTMwMDM4WhcNMjYwNjMwMTMwMDM4WjAzMTEwLwYDVQQD
EyhmM2FlOTZiZTJjYzQ0MjBhNDA5ZTU3MDg0MDg3Y2VhMTNhMWE2Y2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnew4b0u9B1l5Sy5/guHURFoKFHm4
GmxHoEXgiD45zm82ZBC3O9JGzrOckIo/ywlTZp44IFNRsDeP6A1yXXwahaiJWj8p
IsZH1S6r5vOLCYi0JZ/D3rkVAhzbii6k/mt8n4/A6NPHPZ/Xq9m3JjxpskBcfq2d
UK0vWhjU3FaH7CHLY1chFbtj5g+oH8UsNvcu0ZxXlHNA//vzRPRMbuQslAw66nUz
Gvyb8OTkzNccAww8MKnxxzOoHlvDBnav3vE51t+5Tw4MoL/R5cyoRBpMefkywIv1
yUoM2d+cQQ5LmND24avdbhK9A6PMT2lgArSemo+oMSnmt/gLo9yI6bKMpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOulr4sxEIKQJ5XCECHzqE6GmzcMB8GA1UdIwQY
MBaAFF9KjwTvL+vlT522qaL4VllLbi8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzIt
NDU3OWEzOGY2ZDA4LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzItNDU3OWEzOGY2ZDA4
LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZzwsTEE
DKYKpiihXwUOcgqhXuZucUw0sFrkc0LNk+hwZ6SZ9UT05d0+6K8I7xZFexj9zgUW
J4u8iGvKDMmQVpHK9khKWM66eOz4uXmjlF5JYbdku0ittr0cxoMLT4My+S5h8oM+
Zkc2JM6ZGwk+y+Jyl5yu1K3FAsK39meDPbk5UnP7uFYfr6aOcq4curphcAbdl0Mw
CRU79NXDS2nfLKInfaOnMbgF512bLONOpuZel6lSkh+Hh70l4/TA1Ee617OtybYu
23ZRpqefDzeEvibPBVXbYAQGq/7im29mC5aHBmuERZA1FmRIItqdguwpRHHu/hJd
JwnqEBvlYz2fdg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 19:26:45 2026 by rpki-client